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(57) Abstract: An algorithm (such as the MD5 hash function) 
(104) is zpphed to a file (102) to produce an intrinsic unique 
identifier (lUI) (106) for the file (or message digest). The file 
is encrypted using its lUI as the key (106) for the encryption 
algorithm. An algorithm ( 1 12) is then applied to the encrypted 
file (110) to produce an IU1(1 14) for the encrypted file. The 
encrypted file is safely stored or transferred within a network 
and is uniquely identifiable by its lUI. The encrypted file is 
decrypted using the lUI of the plaintext file as the key. The 
lUl serves as both a key to decrypt the file and also as verifi- 
cation that the integrity of the plaintext file has not been com- 
promised. lUIs for any number of such encrypted files may be 
assembled into a descriptor file (130) that includes meta data 
(134) for each file, the lUl (106) of Che plaintext file and the 
lUl (1 14) of the encrypted file. An algorithm (136) is applied 
to the descriptor file to produce an lUI (138) for the descript(M' 
file. The plaintext descriptor file is then encrypted using the 
descriptor file lUI as a key for the encryption algorithm. An 
algorithm (144) is applied to die encrypted descriptor file (142) 
to produce an lUl (146) for the encrypted descriptor file. The 
lUl of the encrypted descriptor file is a location-independent 
identifier to locate the encrypted descriptor file. A flattened 
descriptor file (460) includes the lUIs (416, 422, 432) of en- 
crypted data files and the lUI (456) of the encrypted descr^tor 
file. An algorithm (462) is applied to the flattened descriptor 
file to produce its own lUI (464). . 
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_5 System and Method for Secure Storage, 

Transfer and RetrTeval oTConte 

FIELD OF THE INVENTION 

10 The present invention relates generally to the secure storage, transfer and 

retrieval of information using a computer. More specifically, the present invention 
relates to a technique for identifying information using an intrinsic unique identifier 
and for securely storing, transferring and retrieving that information using related 
techniques. 

1 5 background of the invention 

Digital information (such as a computer file) must often be identified to be in a 
particular state, denoted by the status of the information as of some event or fime. 
Digital information is highly subject to change; nomfial attempts to improve the 
content, inadvertent commands or actions which change the content, or tampering by 
20 others are difficult to detect. 

Another problematic attribute of digital information is that copies may exist 
which are identical in content but differ in the meta data that the computer system 
uses to describe the digital information. Such meta data includes the date/time 
recorded for the creation or last modification of the file and the file name. The meta 

25 data may imply that otherwise identical copies of digital information are different 
when in fact they are not. Such confusion makes it difficult to avoid unnecessary 
duplication of content on a single computer or on a collection of computers on a 
network: The inability of systems to reliably distinguish different versions of files 
with the same identifier or to recognize identical files with different identifiers wastes 

30 network resources and creates confusion when files are transferred between users of a 
network. 
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Further, data on computer systems can generally only be accessed through 
identifiers which to a greater or lesser extent include information about the location of 
the file in the storage of the computer. For example, files within a sub-directory are 

^t risk if someone changes the sub-directory name. If changed, the path to a file 

5 becomes invalid, and all of the stored or remembered names of files become invalid 
as well. 

Finally, it is inconvenient for computer users to identify collections of specific 
versions of digital files. It would be desirable for users to refer to'collections of 
specific copies or Versions of digital files without creating a new entity which 
10 incorporates copies of the files into a new form. Many mechanisms have been created 
to combine such copies into what are commonly called archive files. Such solutions 
create additional copies which are often proliferated to many systems. The difficulty 
is that digital copies of many of the files in an archive are aheady present on the 
systems to which they are copied, which is wasteful and potentially confiising. 

15 One result is that duplicate copies of digital files are fi-equently stored on 

computer storage devices (at expense to the owner of the system) or transferred via 
telecommunications devices (at further expense to the system owner and the 
telecommunications provider). This duplication strains limited resources and causes 
needless confusion on local networks and on collections of systems connected by 

20 telecommunication networks. 

To address various of these problems, unique solutions have been presented in 
U.S. patent application Nos. 09/236,366 and 09/235,146, filed January 21, 1999 in the 
name of Carpentier et al. In one embodiment of these inventions, a technique as 
shown in FIG. 1 is used. FIG. 1 illustrates a technique by which any number of files 

25 are uniquely represented by an identifier for later retrieval. As shown in FIG. 1 , the 
cryptographic hash function known as the MD5 algorithm (as one example) is applied 
to the contents of file A to produce a unique identifier 20 for that file which is 
referred to as MD5 A. The algorithm is also applied to files B and C to produce 
unique identifiers 22 and 24. Next, a descriptor file 30 is created that includes meta 

30 data 32 that describes high level information concerning the files (such as the folders 
in which they are enclosed, time stamps, size, etc.) and information for each file. In 
one embodiment, the information for each file includes the file name 34, file meta 

-2- 



wo 01/18633 



PCT/lBOO/01354 



data 36 (such as lime stamp, size, etc.) and the recently calculated MD5 20 for the 
file. As shown, such information may be included for each of the other files. Next, 
the MD5 algorithm may be applied to descriptor file 30 to produce a unique identifier 
40 for descriptor file 30. 

5 As described in the above patent applications, the unique identifier 40 for 

descriptor file 30 can be used to provide many advantages. For example, identifier 40 
can be used to uniquely identify descriptor file 30, and in turn the identifiers 20-24 
can then be used to'uniquely ideritify files A; B-and-Cr Accordingly-,-files Aj B and-C 
may be stored once anywhere on a network and may be eventually located, retrieved 
1 0 and identified using identifier 40 and descriptor file 30. 

Although the above techniques have many advantages, and are extremely useful 
in certain applications, there is nonetheless room for improvement in the area of 
information management. As alluded to above, managing front office files and web- 
based information is a big problem with today's workers. Because data is referred to 
15 by breakable URLs and path names, the disadvantages are huge: data can be 

modified, corrupted, misplaced, and unreachable. As a result, valuable information is 
lost to an enterprise or its integrity becomes suspect. 

More specifically, data protection relies on an extensive organization and 
expensive specialists to manage, backup and archive digital information. Locating 

20 and retrieving the right information fi-om its exact location can be time consuming if 
not impossible because the information may be dispersed across various hard disks, 
file servers, and the Internet in duplicated forms and with a variety of hard-coded file 
names. Furthennore, sharing such information internally and externally can seriously 
degrade network performance, not to mention putting sensitive information at risk. 

25 Electronic mail attachments can be too large or take too long to transfer. A download 
from an FTP server or a web site may have to be started all over again if interrupted. 
The same exact download performed by a large number of users in one site can slow 
down the whole network. In addition, files are continually being modified, deleted, 
moved or misplaced, meaning that there is no certainty in the location of a file or in 

30 its data integrity. Thus, it is no surprise that workers themselves become responsible 
for managing their own data and saving versions of documents. Such efforts are 
extremely time consuming and may not always work. 

-3- 
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Although the embodiments described in the above applications may address 
some of these problems, there are further issues that remain to be addressed. For 
example, if unique identifier 40 is either intercepted or otherwise obtained by an 
unscrupulous individual, that individual may then be able to retrieve descriptor file 30 
5 which would then allow the indi viduaTtblo^cate and retrieve Tilesl^rB and Cr If 
these files contain sensitive or secret company information, there would then be a 
problem. In other words, the advantage provided by identifier 40 in that it can be 
used to uniquely locate a group of files can also be turned to a disadvantage if the 
wrong party obtains identifier 40 and gains access to sensitive information contained 
10 in the files. Furthermore, even though files A, B and C may be stored anywhere on a 
network in a location-independent manner, a secret file might still be stolen, viewed, 
and/or printed if it is not secured appropriately. 

Thus, workers are called upon to secure their own data files. For example, a 
file may be stored in a computer in a physically secure location (such as in a locked 

15 room with only electronic access), the file may be electronically locked using a 

password or other operating system function, the file may be encoded, or some other 
security technique may be used. Thus, it is no surprise that workers themselves 
become responsible for managing the security of their own data, encrypting files, 
password-protecting files, hiding files and finally saving versions of files where they 

20 believe they are safe and can be located later. Placing the burden upon the worker to 
implement security for a particular file and then maintain that security over the life of 
the file is extremely onerous, expensive, and may not be foolproof 

Accordingly, a technique is desired that would provide efficient and near 
foolproof security for digital information and/or its respective unique identifiers. In 
25 particular, it would be desirable to have such a technique that works well with the 
embodiments described in the above patent applications; such a technique would 
provide a user with the assurance that not only can a file be uniquely identified, but 
also that the file can be kept secure fi*om prying eyes and its integrity can be 
guaranteed. 
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SUMMARY OF THE INVENTION 

In a first embodiment of the invention, an algorithm is applied to a file to 
produce an intrinsic unique identifier (lUl) for the file. To provide security for the 
file, the file is then encrypted using the recently produced lUI as a key for the 
5 encryption algorithm. The file may also be compressed in addition to being 

encrypted. An algorithm is then applied to the encrypted file to produce an lUI for 
the encrypted file. Thus, the encrypted file may be safely stored or transferred within 
- a network and is uniquely identifiable_by iis iyi._ An authorized party who obtains^ 
the encrypted file may then decrypt the encrypted file using the lUI of the plaintext 

10 file if he or she has access to this key. Using the lUI of the file to also serve as a key 
to encrypt the file provides many advantages. For example, a single identifier (in this 
case the lUI) serves as both a key to decrypt the file and also as verification that the 
integrity of the plaintext file has not been compromised. Further advantages and 
specific applications of this technique are presented below. In one specific 

15 embodiment, the MD5 algorithm is used to generate the lUI for the plaintext file. 
The resulting MD5 (the result of the hash function) may then be used to verify that 
the plaintext file has not changed. 

In a further addition to this first embodiment, lUIs for any number of such 
encrypted files may be assembled into a descriptor file. In one specific 

20 implementation, the descriptor file includes meta data for each file (such as the file 
name), the lUl of the plaintext file and the lUI of the encrypted file. An algorithm is 
applied to the descriptor file to produce an lUI for the descriptor file. The plaintext 
descriptor file is then encrypted using the descriptor file lUI as a key for the 
encryption algorithm. The result produces an encrypted descriptor file. An algorithm 

25 is then applied to the encrypted descriptor file to produce an lUI for the encrypted 
descriptor file. The encrypted files and the encrypted descriptor file may then be 
safely stored or transferred within a network. The lUl of the encrypted descriptor file 
is used as a location-independent identifier to locate the encrypted descriptor file. 

Thus, an interested party is able to locate and retrieve the encrypted descriptor 
30 file using its lUI. The party would not, however, be able to decrypt the encrypted 
descriptor file unless it is also provided with the lUI of the descriptor file which has 
been used as an encryption key. Thus, this key may be withheld fi'om a party until 
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such a party is authorized to gain access to information included within the files. 
Once the party obtains the lUI of the descriptor file, it may then decrypt the encrypted 
descriptor file to obtain the plaintext descriptor file. Using the fUIs of the encrypted 
and plaintext files included in the descriptor file, the party may then locate the 
5 encrypted data files and decrypt them. iFan altemSe implcmemation7the lUIs of the- 
encrypted data files may be located outside of the descriptor file and may be provided 
to the interested party so that the party may retrieve the encrypted data files. In this 
-Scenario,_the lUls ofjhe encrypted data files may or may not be present within the 
descriptor file. 

10 hi a second embodiment of the invention a flattened descriptor file may also be 

produced. A descriptor file, its lUI, an encrypted descriptor file and its lUI may be 
produced as described in the first embodiment. Additionally, a flattened descriptor 
file is created based upon the descriptor file. The flattened descriptor file includes the 
rUIs of the encrypted data files and the lUI of the encrypted descriptor file. An 

15 algorithm is then applied to the flattened descriptor file to produce its own lUI. The 
lUI of the flattened descriptor file may then be used as a unique identifier to 
indirectly reference all of the data files listed within the descriptor file. Using the lUl 
of the flattened descriptor file, an interested party may retrieve the flattened 
descriptor file (in plaintext). Using the lUIs it contains the party may then obtain not 

20 only the encrypted data files but also the encrypted descriptor file. 

At this point, however, even though the party has the encrypted data files, it 
does not have access to these files. At a suitable time, the party may then be suppUed 
with the lUI of the descriptor file which serves as a key to decrypt the encrypted 
descriptor file. Once decrypted, the party may then use the descriptor file as 

25 described in the first embodiment to retrieve and decrypt the data files. 

Advantageously, two items are necessary for retrieval and decryption of the data files: 
the lUl of the flattened descriptor file which allows retrieval of the encrypted data 
files; and the lUI of the plaintext descriptor file which allows decryption of the 
encrypted descriptor file. Thus, one or both may be withheld from a party to prevent 

30 its access to the data files, while allowing the party to physically obtain the encrypted 
files. Furthermore, a party able to retrieve the encrypted data files is guaranteed that 
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the files have not been changed from the time their lUIs have been calculated, but is 
unable to decrypt these files unless it receives the second item. 

Through use of the present invention, each file to be stored or transferred need 
oniyBe~enclypte^^ 

5 be manipulated. There is no need to use different keys for different users. Further, 
should the same file exist in two different locations on a computer or within a 
network, use of the present invention produces an encrypted file for each that is the 
same automatically. Thus, only this single encrypted file need be stored and/or 
transferred. Such benefits accrue automatically due to the nature of the present 
10 invention. The encrypted form of each file can be stored or transmitted anywhere 
within a computer network without the need for firewalls, access control, virtual 
private networks, or secure session protocols. Further, by using the intrinsic unique 
identifier to serve as the encryption key for the file as well, this single identifier not 
only serves to authenticate the file but also to verify the integrity of the file. 

15 The present invention in its many embodiments provides a variety of 

. advantages in numerous applications which will be discussed below. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The invention, together with further advantages thereof, may best be understood 
by reference to the following description taken in conjunction with the accompanying 
20 drawings in which: 

FIG. 1 illustrates a prior art technique by which any number of files are 
uniquely represented by an identifier for later retrieval. 

FIG. 2 illustrates a technique by which a file may be encrypted according to one 
embodiment of the invention. 

25 FIG. 3 illustrates a technique by which a descriptor file is created and encrypted 

according to one embodiment of the invention. 

FIG. 4 is a flow diagram describing how an intrinsic unique identifier (lUl) may 
be created for a group of files. 

-7- 
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FIG. 5 illustrates symbolically one example of a descriptor file. 

FIG. 6A illustrates an example of an implementation of a descriptor file written 
using a modified version of XML. 



FIG. 6B illustrates a modified or "flattened" descriptor file suitable for use iii~ 
5 the second embodiment. 



FIG. 7 illustrates a technique for generating intrinsic unique identifiers (lUIs) 
according to a second embodiment of ttie invention. 



FIG. 8 is a flow diagram describing a technique for creating a number of 
intrinsic unique identifiers representing a collection of files according to a second 
1 0 embodiment of the invention. 

FIG. 9 is a flow diagram describing how files identified in FIGS. 2 and 3 may 
be retrieved. 

FIG. 10 is a flow diagram describing retrieval of files uniquely identified using 
the embodiment of FIG. 7. 

15 FIG. 1 1 is a flow diagram describing how a file may be looked for and obtained 

in accordance with an embodiment of the present invention. 

FIG. 12 is a block diagram illustrating a use of the invention in the area of 
secure storage. 

FIG. 13 is a block diagram illustrating use of an embodiment of the invention in 
20 the area of access control. 

FIG. 14 is a block diagram illustrating use of an embodiment of the invention 
for escrow purposes. 

FIG. 15 is a block diagram illustrating a computer network environment 
suitable for use with an embodiment of the invention. 



25 



FIGS. 16 and 17 show one possible form of a computer system. 
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DETAILED DESCRIPTION OF THE INVENTION 

The present invention is applicable to a wide variety of digital information. As 
used herein, digital information may refer to a computer file, a group of files, a group 

of-fiJe-identifiers,^or_other_coliect2ons database information. Such other 

5 collections of data include documents, selected frames or clips from digital audio or 
video streams, streams firom message records or files, of log entries firom audits or 
status logs of systems. Database information might include selected database records 
from a relational, hierarchic, network or-other format datab^^^^^^ Indeed, digital 
information may include any string of binary digits used wholly or in part by some 

10 application or device. In one embodiment, the present invention manipulates digital 
information as binary large objects, or BLOBs (a bit sequence). 

The following discussion illustrates embodiments of the invention using the 
example of typical computer files for ease of understanding. It should be pointed out, 
however, that embodiments of the invention are well-suited for use with any of the 
1 5 beforementioned digital information. 

As discussed aboye, it would be desirable to address security issues relating to 
computer files and to the intrinsic imique identifiers (lUIs) of the data files and of a 
descriptor file. As pointed out, it is possible for a data file to be obtained by 
unauthorized parties or for an lUI of a descriptor file to be intercepted. Although.it 
20 may appear that standard encryption techniques may address these problems, there 
are drawbacks associated with conventional uses of these standard techniques. 

For example, it can prove burdensome to store or send a file to numerous 
people using public key cryptography. In order to send a single file to fifty people 
using public key cryptography, one would first have to obtain the public key fi-om 

25 each of the fifty people. Then, fifty copies of the file would have to be made, and 
each file encrypted with a different one of the fifty keys. Fifty different encrypted 
files would then be created which are sent out or stored for later retrieval. The 
problem is that the single file that was started with has now become fifty different 
files each of which must be managed and transported separately. Calculation of an 

30 identifier for each of the fifty encrypted files would then produce fifty different 
identifiers each of which must be managed and transported. It would be most 
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desirable to have a single copy of the plaintext file and a single copy of the encrypted 
file for use by an authorized entity to cut down on the proliferation of files copies. 

Use of conventional symmetric cryptography also has drawbacks. Using the 

above exampie of a single-file to be-distribut to 

5 use a different random key to encrypt the file fifty times. Again, fifty different 

encrypted files must be generated and each of the random keys rnust also somehow be 
transmitted to each person. Further, consider the situation in which fifty different 
files are to sent to one person. If only a single key is used to encrypt all of the files, 
then it would become much easier to hack the key and determine its value by an 
10 unscrupulous third party. Further, if each file is encrypted with a different key, then 
each of these keys must somehow be transmitted to the person and managed in a 
secure fashion. 

Finally, a typical prior art use of either asymmetric or symmetric cryptography 
to encrypt a file might provide a file that is encrypted, but the keys used do not 

15 provide assurance that the file has not somehow been tampered with in either its 
plaintext or encrypted form. Also, a file that has been tampered with might not be 
able to be decrypted. It would be most desirable if a single key could be used lo not 
only encrypt a file but to also insure the integrity of its contents. Further, it would be 
desirable to store and/or transmit the key or keys for a given set of files in a secure 

20 manner. Accordingly, the present invention realizes a technique for addressing the 
above issues. 

FIRST EMBODIMENT 

FIG. 2 illustrates a technique by which a file may be encrypted according to one 
embodiment of the invention. FIG. 3 illustrates a technique by which a descriptor file 

25 is created and encrypted according to one embodiment of the invention. FIG. 4 is a 
flow diagram describing how an intrinsic unique identifier (lUI) may be created for a 
group of files. FIG. 4 will be explained with reference to FIGS. 2 and 3. In step 202 
a group of files (or one file) is selected and its corresponding file data and any meta 
data is collected. As mentioned above, the files selected may be computer files or 

30 any of the digital information previously described. The files selected may include a 
descriptor file, any type of encrypted or compressed file or files that themselves 

- 10- 
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contain intrinsic unique identifiers. File 102 is an example of one of the files selected 
and will be used to illustrate this embodiment. Other selected files or information are 
preferably treated in a similar fashion as file 102. 

In step 206^nlnlnnsic imi^^^^^ .i 

5 Algorithm 104 is applied to file 102 to produce IUI106. The algorithm may be 

applied to the complete file or to any portion of the file. Algorithm 1 04 is preferably 
_any algorithm that can generate a reliably unique identifier for the file based upon the 
file contents. As such, the lUI generated is repeatable in that applicaitiofi of the- - - - 
algorithm again to the file will produce the same TUI. The term "intrinsic" is used to 
10 indicate that the lUI is based at least in part (or in whole) upon the contents of the 

file. Algorithm 104 may be any of a wide variety of algorithms. By way of example, 
algorithm 104 may be a hash function such as the MD5 algorithm or SHA-1 that 
produce a message digest, or may be an error detection algorithm such as employed 
in cyclic redundancy checking (CRC). 

15 Preferably, an algorithm should consistently produce the same binary number 

for any specific instance of digital information and such a binary number should be 
practically proven to be unique with a reasonably high probability for the class of 
digital information being identified. Use of such an algorithm over two binary 
sequences that result in the same binary number can prove that the two binary 

20 sequences are the same. Conversely, use of the algorithm over two binary sequences 
that result in different binary numbers can prove that the binary sequences are 
different. Such an algorithm simplifies the identification of copies of a particular 
portion of digital information (such as a computer file). The result of such an 
algorithm is referred to herein as an intrinsic unique identifier (lUl). Other 

25 algorithms may be used to generate an intrinsic unique identifier as long as the 

probability of generating identical identifiers from different files is below a threshold 
that is defined as acceptable. 

In a preferred embodiment of the invention, the algorithm used is the MD5 
algorithm and produces a 128-bit message digest referred to herein as simply the 
30 "MD5." In this case, algorithm 1 04 generates plaintext MD5 1 06. Plaintext MD5 
106 is an intrinsic unique identifier for file 102 and uniquely identifies file 102 based 
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upon it contents. Should file 102 be changed a newly calculated MD5 would not 
niatch the MD5 calculated for the previous version of the file. 

In step 210 an optional compression step may be performed. In a preferred 

embodiment, each file is also~compressed: "Any of a- wide-variety of-compression 

5 algorithms may be used; the LZW algorithm is preferable, although other algorithms 
associated with formats such as GZIP and CAB may be used. Compression may also 
be_performed after encryption although it is preferable to perform compression first, 
or to perform both together. Alternatively, it is possible to perform the compression ^ 
step and not the encryption step. 

10 In step 214 each file is encrypted using its recently generated MD5 as the key 

for the encryption algorithm. For example, file 102 is encrypted using encryption 
algorithm 108 with the key being plaintext MD5 106 to produce an encrypted file 
1 1 0. Any of a wide variety of ciphers may be used as the encryption algorithm. By 
way of example, the "Two Fish" algorithm works well, although other algorithms 

15 such as block and stream cipher may also be used. 

The use of plaintext MD5 106 to encrypt file 102 provides advantages. The 
single key used to encrypt and decrypt file 102 can also be used to verify the integrity 
of the file because the key happens to be plaintext MD5 106 that has been generated 
using the MD5 algorithm. Because it is an intrinsic unique identifier it may also be 
20 used to verify that the contents of file 1 02 have not changed. 

Now that encrypted file 1 10 has been created it may be stored and/or transferred 
within a computer network in a secure manner. In step 218 an intrinsic umque 
identifier is generated for file 1 10 using algorithm 1 12. In this example, algorithm 
1 12 is the MD5 algorithm and the result is encrypted MD5 1 14. Preferably, 
25 algorithm 1 12 is the same as algorithm 104. It is possible, however, that the two 
algorithms may be different; for example, by convention it may be agreed that 
plaintext files use a particular algorithm while encrypted files use a different 
algorithm to generate their intrinsic unique identifiers. 

At this point, a secure and sufficient technique for storing, locating and 

30 retrieving file 102 has been described. Encrypted file 1 10 may now be stored within 

a computer network instead of storing the plaintext file 102. By providing a user with 
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encrypted MD5 1 14, the user will be able to locate and retrieve file 1 1 0. The 
integrity of file 110 can be guaranteed by recalculating the MD5 of the file and 
comparing it to MD5 114. The key 106 to encryption algorithm 108 may be held by 

ihe originating-party-and only_rele.asM.tojLUS«Lwhe^^ that the user has 

5 access to file 110. Once the key 106 is given to someone that has retrieved file 1 10, 
the file may be decrypted to produce plaintext file 102. Thus, two pieces of 
information are necessary for a user to have access to file 102: encrypted MD5 1 14 
and plaintext MD5 106. A user thatis provided with encrypted file 110-is also, 
guaranteed that the original plaintext file has not been changed. 

1 0 In step 222 a descriptor file is created that represents all of the files that have 

been selected. FIGS. 5 and 6 provide greater detail of how a descriptor file may 
appear. Descriptor file 130 may include a variety of information and may take many 
forms. In this example, for each of these files selected and previously encrypted, it 
includes a file name 132, file meta data 134, plaintext MD5 106 and encrypted MD5 

15 1 14. In other embodiments the encrypted MD5 for each file may also be located 
elsewhere to assist in locating the encrypted files and may or may not also appear in 
file 130. A descriptor file 130 includes the plaintext MD5 for each file, once 
descriptor file 130 has been obtained it may be used to decode the encrypted files to 
obtain the original plaintext files. 

20 In step 226 an intrinsic unique identifier is generated for descriptor file 130. In 

a preferred embodiment, algorithm 136 is the MD5 algorithm which is used to create 
MD5 138 which is preferred to as the "key MD5." In step 230 descriptor file 1 30 is 
encrypted using key MD5 138 as the key to encryption algorithm 140 to produce 
encrypted descriptor file 142. Preferably encryption algorithm 140 is the Two Fish 

25 algorithm. File 1 30 may also be compressed in a similar way as discussed in step 
210. MD5 138 is referred to as the "key MD5" because it provides the key for 
decrypting file 142. 

In step 234 an intrinsic unique identifier for file 142 is generated using 
algorithm 144. Preferably, the MD5 algorithm is used to produce master MD5 146. 
30 Preferably, algorithms 136 and 144 are the same algorithms although they may be 
different, and may be diflerent from algorithms 104 and 112. By convention, it may 
be agreed upon beforehand to use different algorithms in different places. Also, meta 
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data 134 may also indicate which algorithms are to be used with the plaintext and 
encrypted files. By the same token, meta data for file 1 30 may be included 
therewithin to indicate algorithm 136. At this point, the selected files have been 
uniquely„identiTied using eith 146 orkeyMDS 138. 

5 Step 238 is an optional step in which the master MD5 and the key MDS are 

encoded. Because a resultant MDS is a 128-bit number, it may be desirable to encode 
_ this number in a more manageable form for human use. The resultant number may be 
encoded in any of a variety of forms including decimal, hexadecimal or binary. 
Preferably, the number is converted to a base 36 number mapped to the set of twenty- 

10 six alphabetic and numeric characters in the base ASCII character set. This mapping 
is referred to as "ASCII Armoring" and is commonly used to render binary 
information in a limited character set for transmission over protocols that require 
content to be constrained to alphanumeric coding. In a preferred embodiment, a flag 
character is included at a predetermined position within the resulting string bringing 

15 the total length of the string to 27 characters. This flag character could also provide 
information such as algorithm to use, type of fije, etc. 

The result is a 27-character ASCII string of digits and upper case letters. Such 
a format provides a compact form that may more easily be written down by a person 
and/or manipulated by a computer, and is also in a form that is easily accommodated 
20 by many software programs. In addition, this particular representation of an intrinsic 
unique identifier has the advantage of being more easily retrieved by data query, 
coded into software application file requests, referenced by a content or asset 
management system, requested in an object browser, electronically copied and pasted 
jfrom one document to another, sent via electronic mail, etc. 

25 Master MDS 1 46 may also be associated with a file locator to assist with 

finding file 142. Although the invention works without an additional file locator, one 
may be used. An example of a file locator is a URL, an IP address, or a path name. 

In step 242 the encrypted files that have been created may be stored. The files 
created may be stored in any suitable location such as on the user's computer, at a 
30 remote server, in an archive, at the site of a future user, or other. In fact, the files 
created need not be stored together, but may be stored in different locations. 
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Preferably, the files that are stored for future reference by a user include the 
encrypted files (such as file 110) and the encrypted descriptor file 142. Preferable, 
the plaintext files (such as file 1 02) and the plaintext descriptor file 1 30 need not be 
stored in an accessible location due to security. The files may be destroyed or kept by 
5 the originator in a secure location. Because the plaintext files can be created fi^ the" 
encrypted files using the appropriate key, it is not necessary to have the plaintext files 
easily available. 

In step 246 the master MD5 146 and the key'MDS 1 38 afe'retumed to the" 
originator for future reference. At this point, both the master MD5 and the key MD5 

10 would be needed by a party who wishes to access the encrypted files. For example, 
should the originator wish an interested party to have access to the encrypted files at 
some point, he may provide that party with the master MD5. Using master MD5 that 
party could obtain encrypted descriptor file 142 but would have no way of decrypting 
it. Only when the party is provided with key MD5 from the originator, can that party 

15 decrypt file 142 and obtain not only the encrypted MD5s (to locate each encrypted 
file) but also the plaintext MD5 for each file (which would allow that party to decrypt 
the encrypted file and verify that the original file has not changed). Alternatively, an 
interested party may be provided with the encrypted MD5s in addition to the master 
MD5 which would allow that party to retrieve the encrypted files but not decrypt 

20 them. Once the key MD5 was provided, the party could decrypt the descriptor file, 
obtain the keys for the data files, and decrypt them. In an alternative embodiment, the 
user may be supplied with MD5s for the encrypted data files but is not supplied with 
the master MD5 or the key MD5 until a later time. Alternatively, the user may be 
supplied with the key MD5 initially and the master MD5 later. Such embodiments 

25 have a variety of applications which are discussed below. 

DESCRff TOR FILE EXAMPLES 

FIG. 5 illustrates symbolically one example of a descriptor file 300. In general, 
a descriptor file includes the plaintext MD5 for each of the encrypted data files. 
Thus, once the descriptor file is obtained and decrypted, the user may then decrypt the 
30 encrypted data files using the plaintext MD5 for each file as a key in the decryption 
algorithm. Other information may optionally be included within the descriptor file to 
assist with locating an encrypted data file, reconstructing its directory environment, 
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and/or administrating a scheme for generating revenue for the use of such a 
technique. Further, a descriptor file may be implemented in any of a wide variety of 
modeling languages; examples are given in FIG. 6A. 

lH~blie¥peciffc~embodimentrdescriptor-file-300-includ 

5 describes options regarding the descriptor file and infomiation concerning its use and 
contents. By way of example, meta data 302 includes the type oifthe descriptor file, a 
name for the descriptor file, a creation date, comments, the number of data files that it 
represents, the number of directory folders it represents, the total size of all of the~ 
files combined that it represents and other information such as author, keywords, etc. 

] 0 A user-supplied name may be assigned when the descriptor file is created and is 

used as a mnemonic aid by the user to identify a folder (for example) from which files 
represented by the descriptor file have originated. In another embodiment of the 
invention, the name of the folder itself is suggested automatically as a mnemonic aid. 
This name can be associated with the master MD5 created for the descriptor file to 

15 enable a user to more easily identify the general contents of a descriptor file. For 
example, when retrieving data using a particular master MD5 this name may be 
included to assist the user. The creation date indicates when the descriptor file was 
created and is useful for keeping track of versions. Comments may be inserted into 
the descriptor file for any purpose by the user. The number of files represented, 

20 number of folders and total size is useful for progress status during downloading. 

A descriptor file may include any number of represented files and optionally 
may include the folders in which the files originally resided. Any number of folders 
and any hierarchy may be represented in the descriptor file. By way of example, 
included is a folder name 310, its time stamp 312 and operating system attributes 314. 
25 Time stamp 3 1 2 indicates when the folder was last modified. Attributes 314 indicate 
operating specific attributes for the folder such as whether the folder is read-only, 
whether it should be hidden, and its type such as system, archive or temporary. 

Any number of files may be indicated as being originally found within folder 
310, such as the files identified by file name 320 and file name 340. A wide variety 
30 of meta data may be present that provides information regarding the file identified by 
file name 320. Included is a time stamp 322 indicating when the file was last 
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changed, a size 324, the plaintext MD5 326, the encrypted MD5 328, a creation dale 
of the file 330, and any number of operating specific attributes 322. These attributes 
may include the read or write status of the file, the file type, its creator, etc. By 
including the encrypted MD5 328 for the file, the file becomes content addressable 
5 using the encrypted MD5 as a location-independent file name. Plaintext MD5 32*6 
can then be used to decrypt the retrieved encrypted file. Other file names and 
associated rneta data may also be indicated as being included in folder 310. Any 
- number otfolders and their included files (indicated by 324 and 344) may also be 
included. A hierarchy of folders may exist in which one folder and its files are 
10 present within another folder. 

Administrative data 346 may also be included within the descriptor file 300 to 
assist in generating revenue from use of the technique, tracking the software which 
embodies the technique, etc. By way of example, data 346 includes an identifier 
indicating on which machine the software was originally installed, In one 

i 5 embodiment of the invention, software which embodies the invention is either sold, 
licensed, or provided free to users. Included along with the software is a so-called 
"token box" that represents the number of times that a user may create a descriptor 
file and generate a master MD5 for a collection of files. Included within data 346 
would then be a token box identifier and a token box count. The box identifier 

20 uniquely identifies the particular box that was provided along with software to a user. 
The box count indicates the number of times that a user may generate a descriptor file 
and its corresponding master MD5. For example, a user may pay for (or receive firee) 
software embodying the invention that has a box count of 1000. The software keeps 
track of this box count variable and decrements it each time the user creates an 

25 encrypted descriptor file and its associated master MD5. The box identifier and the 
current box count are then included within data 346. The box identifier may by 
useful to indicate that only certain types of descriptor files may be generated. 
Preferable, it is unique for a given copy of software provided to a customer and is 
similar to a serial number. The box count included within the descriptor file is useful 

30 for tracking token boxes that have been "hacked** into to circumvent paying. 

Also included within data 346 may be a digest of the complete descriptor file. 
For example, the digest may be created by performing a hash fiinction upon the 
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descriptor file and then encrypting the hash produced with a secret key known only to 
the manufacturer of the software. Asymmetric or symmetric cryptography may be 
used. By including this digest within (or at the end) of the descriptor file, the 
manufacturer of the software can prove whether or not the descriptor file and/or its 
5 associated master MD5 was created by the manufacturer because only the 

manufacturer can calculate this unique digest. Thus, the manufacturer can determine 
if another entity created the descriptor file and/or its master MD5. This information 

- - may be useful in determining jwhether to_proeess a request for a retrieval of files, for 
requesting payment from an entity, or for legal protection of a particular 

10 implementation. 

The type of a descriptor file indicates one of a variety of types of the file and its 
associated master MD5. In general, a particular type provides different meta data and 
different behavior for different classes of descriptor files. For example, certain types 
of descriptor files may include certain meta data that are not present within other 

1 5 types and may cause a software agent or an operating system to initiate various 
actions that are different from other types. A wide variety of types may be defined 
for descriptor files. By way of example, these types include the following. A 
standard type may automatically place retrieved files back into a defauU folder on the 
desk top of the user's computer when the files are retrieved using embodiments of the 

20 present invention . In other scenarios, however, it may be desirable to retrieve a file 
and place it in a particular location within a computer or elsewhere. An extended type 
of descriptor file allows the descriptor file to include meta data for each file name or 
folder indicating to where within a computer and/or its operating system the file shall 
be placed when it is received. For example, for performing software replacement or 

25 upgrades, meta data included within the descriptor file for each file may indicate that 
a particular file should replace a file within the operating system of the computer. 
Thus, when the present invention is used to retrieve a file, a soft^vare agent may 
automatically place the retrieved file in the location indicated by the meta data. 

Because automatic replacement or placement of operating system or application 
30 software files may be sensitive and require permission, a certificate may be included 
along with the descriptor file for this type. In this scenario a user of a descriptor file 
first approves of a given creator of the files that are to be retrieved. The software 
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agent that implements the present invention then keeps track of a list of creators that 
are approved by the user. The user and the creator then agree upon a digital 
certificate that authenticates the creator to the user. Creation and use of digital 
certificates are v^ell-known in the art and any of a variety may be used. In this 
5 situation, included within mela data 302 is a certificate from the creator that 

guarantees the authenticity of the files indicated within the descriptor file. Once the 
software agent has decrypted the descriptor file, it retrieves the certificate of the 
- - -creator and veri fies that it does in fact authenticate that^particular creator. Jhe ^ 

software agent then compares that creator to the list of approved creators, and if there 
10 is a match, the indicated files in the descriptor file are retrieved, decrypted and 
installed on the user's computer where indicated. 

Another type of descriptor file is a trial type. When using this type of 
descriptor file, an advertisement appears on the user screen whenever a descriptor file 
is created and a master MD5 generated. In return for viewing the advertisement, the 
1 5 box count for that particular user is not decremented. The data representing the 
advertisement may be stored within the software agent that embodies the present 
invention, or may also be included within the descriptor file. 

Another type of descriptor file is a service type. This descriptor file includes 
meta data that identifies a software plug-in in any suitable fashion. By way of 

20 example, the plug-in may be identified using an intrinsic unique identifier (lUI) 

according to any embodiment of the present invention or may be identified by using a 
file name, location, etc. When files are retrieved by the software agent by using the 
descriptor file, the software plug-in is identified, located and automatically installed 
upon the user's computer. For example, the plug-in may be a Java file to load or 

25 XML configuration files. 

Descriptor files may also be customized by a user. For example, a user may 
create a custom type of descriptor file that automatically adds particular meta data and 
behavior to the file when it is created. Custom descriptor files may also be created for 
each company to whom software embodying the present invention is to be provided. 
30 For example, any relevant information may automatically be added to the descriptor 
file when created or the user may be prompted to add information that is relevant to 
the type of descriptor file and its contents. Automatic behavior may be added to a 
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custom descriptor file that performs certain actions when a descriptor file is used to 
retrieve files. For examples, codes within the descriptor files may automatically send 
electronic mail. Other actions that may occur include publication on web sites. 

~^ FIGr6A Illustrates an example of-an-implementation of a-descriptor-file-written. 

5 using an application of XML. The extensible mark up language (XML) is preferred 
although other mechanisms such as initialization (",ini" files) may be used. The 
particular descriptor file shown uses a so-called "hyperfile" modeling language 
(HFML) based on XML to describe the structure of the directories containing files as" 
well as the files themselves. An HFML is described in the U.S. provisional patent 

10 application No. 60/072,316, filed January 23, 1998. In general, it should be noted 

that implementation of the invention is not restricted to a descriptor file written in any 
particular syntax. The HFML in the preferred embodiment is used because it is 
readily parsed and can be used to generate a tree-structured directory of the files and 
keys. 

1 5 The descriptor file of FIG. 6A includes two MD5s for each file. The MD5 

termed "decoded.mdS" corresponds to plaintext MD5 106 of FIG. 2 (for example), 
and represents an intrinsic unique identifier for a plaintext file. The MD5 termed 
simply "md5" corresponds to encrypted MD5 1 14 of FIG. 2, and represents an 
intrinsic unique identifier for the encrypted plaintext file. The descriptor file of FIG. 

20 6A includes no administrative data, although it may. 

FIG. 6B illustrates a modified or "flattened" descriptor file suitable for use in 
the second embodiment. In the second embodiment (described in FIGS. 7 and 8), 
descriptor file 402 may be implemented as in FIG. 6A, and flattened descriptor file 
460 may be implemented as in FIG. 6B. Note that the file of FIG. 6B includes the 
25 MD5 of the encrypted descriptor file of FIG. 6A (termed the "keyfile md5"), and 
includes the MD5s for the encrypted plaintext files, but not the MD5s for the 
plaintext files. FIG. 6B also includes administrative data ("eclipcontents") such as a 
box identifier, a box count, a seat identifier, and a digest. 

SECOND EMBODIMENT 

30 The first embodiment has described the technique by which a master MD5 and 

a key MD5 are provided to a user who wishes to locate and access a collection of 
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encrypted files. Because the master MD5 only allows access to encrypted descriptor 
file 142, it would be difficult for a user to locate and retrieve the encrypted data files 
because the descriptor file is encrypted. It is not until the user is also provided with 
the key MD5 that the user is able to decrypt the descriptor file and obtain the MD5s, 

5 allowing it to locate the encrypted data files. In various situations it may be desirable" 
to allow a user to not only obtain the encrypted descriptor file at first, but also to 
allow the user to locate and obtain the encrypted data files without allowing those 

— files to be encrypted. Eor example, this is usefiil when admjnistrating pool servers, 
load balancing, caching, mirroring, and in other applications such as escrowing. 

10 FIGS. 7 and 8 describe an embodiment by which the user is not only allowed 

access to the encrypted descriptor file, but also obtains the means to locate the 
encrypted data files. FIG. 7 illustrates a technique for generating intrinsic unique 
identifiers (lUIs) according to a second embodiment of the invention. FIG. 8 is a 
flow diagram describing a technique for creating a number of intrinsic unique 

15 identifiers representing a collection of files according to a second embodiment of the 
invention. 

In steps 502-51 8 a collection of files are selected, MD5s are generated and the 
files are encrypted in a similar fashion as described in steps 202-21 8 (not shovs^ in 
FIG. 7). In step 522 descriptor file 402 is created. Descriptor file 402 includes 

20 representative meta data for any number of files and may also include other 
information such as is shown in FIGS. 5 and 6A. Included are a file name 410 
representing a first file, its associated file meta data 412, its plaintext MD5 414 
generated from the plaintext file and an encrypted MD5 416 that is generated firom 
the encrypted file. File name 420 and file name 430 represent second and third files, 

25 respectively, and each haves their associated meta data, plaintext MD5 and encrypted 
MD5. 

In step 526 algorithm 404 is used to generate key MD5 406 for descriptor file 
402. In step 530 descriptor file 402 is encrypted using key MD5 406 as the key to 
encryption algorithm 440 to produce encrypted descriptor file 452. MD5 406 is 
30 referred to as "key MD5" because it provides the key for decrypting file 452. In step 
534 master MD5 456 for file 452 is generated using algorithm 454. Preferably, 
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algorithms 404 and 454 are the same algorithms although they may be different, and 
may be different from algorithms used with the data files. 

At this point master MD5 456 may be provided to a user to allow the user to 

locate ahcl obtaiiTencrypted'descriptor file-452- The user,-howev.er,_would.be.unable 

5 to locate the encrypted data files. It is conceivable that the originator may simply 
provide the encrypted data files to the user or may provide file locators for them or 
may even provide their encrypted MD5s in any fashion. In a preferred embodiment, 
however, the encrypted MD5s for the encrypted data files are'provided in another" ~ 
modified descriptor file. 

10 In step 538 flattened descriptor file 460 is created based in part upon the 

information in descriptor file 402. Included within the flattened descriptor file 406 
are the encrypted MD5s 416, 422 and 432 that provide intrinsic unique identifiers to 
locate the encrypted files represented by file names 410, 420 and 430 in descriptor 
file 402. File 460 may be created by duplicating file 402, removing certain 

15 information and adding other information. For example, master MD5 456 is also 

added to file 460 to allow a user to access file 452. Meta data 470 associated with the 
file 460 may also be added. This meta data may be the same descriptor file meta data 
as found in file 402, may be a subset of that data, or may be different meta data or 
may not appear at all. For example, meta data 470 includes publicly searchable items 

20 but not private data. 

The flattened descriptor file may take a wide variety of other forms. For 
example, other types of file locators may be included instead of the MD5s to provide 
access to the encrypted files or to the plaintext data files. Also, master MD5 456 is 
optional, and file meta data may also be included for each file. 

25 In step 542 algorithm 462 is applied to file 460 to create a user MD5 464 that is 

an intrinsic unique identifier for file 460. Preferable, algorithm 462 is the MD5 
algorithm. In step 544 the user MD5 464 and key MD5 406 are preferably converted 
to ASCII format in a similar fashion as described in step 238 to provide identifiers 
that are more manageable by a user. Because master MD5 456 is not handled directly 

30 by a user in this embodiment, it is optional whether to encode this identifier in file . 
460. 
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In step 548 the relevant files are stored for later access by a user. The files to be 
stored include the encrypted data files, encrypted descriptor file 452 and non- 
encrypted flattened descriptor file 460. These files may be stored in any suitable 
computing device or computer network and may be distributed in different locations. 
5 In one embodiment, the fifes are stored iTTwhaTis teriTied"a~file~"pool": liTgeneral, a ~ 
file pool refers to a collection of distributed storage devices that store files only being 
identified by their MD5s (or other lUIs). 

In step 552 the user lViD5 464 aM the key'MD5 406 are returned to the 

originator for possible distribution to a requesting user. In this fashion, access to the 

10 encrypted data files and eventually to the plaintext files are provided simply via two 
identifiers, namely, user MD5 464 and key MD5 460. For example, using user MD5 
464, the user can access and read file 460 which provides access to the encrypted data 
files and to the encrypted descriptor file (via the master MD5). Once the user is also 
supplied with key MD5 406, the user may decrypt the encrypted descriptor file, 

15 obtain the plaintext MD5s, and decrypt each of the encrypted data files. 

FILE RETRIEVAL EMBODIMENTS 

At this point in time, the originator of the data files has generated key MD5 138 
and master MD5 146 and has securely stored the encrypted files on a computer or on 
a distributed computer network. An interested party such as a user or software 
20 program may perform the following steps to retrieve the files. 

In step 602 the user receives the master lUI (in this example master MD5) 
which is the identifier uniquely representing the files to be retrieved. In step 606 the 
user looks for the file identified by master MD5 146. The file may be searched for 
and obtained in a wide variety of ways. By way of example, the user looks for the 

25 file on a local computer or throughout a distributed computer network. Preferably, 
the file is initially identified by matching master MD5 146 with the MD5 of a 
particular file found. In a preferred embodiment of the invention, step 606 may be 
implemented as described in FIG. 1 1 . In step 610 an encrypted descriptor file 142 
that purports to correspond to master MD5 146 is received. Once received, the user 

30 may assume that the descriptor file is authentic by virtue of the search performed in 
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step 606. It may be preferable, however, to verify that the received file is the correct 
file by first calculating the MD5 of the received encrypted descriptor file in step 614. 

In step 61 8 the received file is verified as being authentic by comparing master 

MD5~1^6~withlhe^MD5 justcalcuJated-from-the r^^ If_the. MD5s. do.not 

5 match, then control returns to step 606 to look for another file. If the MD5s match, 
then the file is authentic and the process may continue. Steps 614 and 61 8 are 
optional steps. 

By virtue of possessing encrypted descriptor file 142, at this point the user is 
effectively guaranteed that all data files that have been encrypted and identified in the 

10 plaintext descriptor file are effectively sealed and have not changed. For example, 
should an unscrupulous party attempt to modify one of the data files, the MD5s of the 
plaintext file and of the encrypted file would not match with MD5 106 and 1 14 in the 
plaintext descriptor file. In this way, the holder of the encrypted descriptor file can be 
assured that once the descriptor file is decrypted that it will be able to verifiably 

15 identify the original data files that have been identified in the descriptor file. In this 
way, encrypted descriptor file 142 serves as a type of escrow of the original data files. 
As such, key MD5 138 may be delivered to the user concurrently with master MD5 
146, sometime shortly there after, or at some later time when the originator wishes the 
user to have access to the original data files. 

20 Therefore, at some appropriate time, in step 622 the user receives the key lUI 

(in this case key MD5 1 38) and may begin to obtain the original files. In step 626 the 
user uses key 138 to decrypt descriptor file 142 and obtain plaintext descriptor file 
130. Although optional at this point, in step 630 the user may wish to verify that 
plaintext descriptor file 1 30 is also authentic. For example, the user may recalculate 

25 the MD5 for file 130 and compare it to key 1 38. Such a check verifies that a bogus 
descriptor file 1 30 has not been substituted for the correct descriptor file and then 
encrypted using key 138. Additionally, a digest may be recalculated for file 130 and 
compared to a previously calculated digest already present in file 130; For example, 
as pointed out in FIG. 5, administrative data 346 may include a unique digest that has 

30 been calculated by the true creator of descriptor file 1 30. If, for some reason the 
MD5s to not match or the digest is incorrect, the in step 634 an error handler is 
invoked to produce a suitable error message and a suitable action. 
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In step 638 the directory structure (if any) described in descriptor file 130 is 
rebuilt using the information contained in the descriptor file. For example, a 
directory structure such as is shown in FIGS. 5 or 6A or some other structure may be 

built^A^hierar^hy^o^ folders may be created, folder and directory attributes may be 

5 assigned and individual file attributes may be identified for assigning to particular 
files once these files are retrieved. 

Because descriptor file 130 lists the encrypted MD5 1 14 of each file identified, 
the user may now look for each of the encrypted files using these MD5s7 Stei3 642 ~ 
may be performed in any suitable fashion, for example, may be performed as 
10 described in step 606 and in FIG. 1 1 by which a file is identified having a particular 
lUI. 

In step 646 a file is received that purports to correspond to encrypted MD5 1 14. 
Although the user may assume that this retrieved file is authentic, it is preferable in 
step 650 that the retrieved file is verified. By recalculating the MD5 of encrypted file 
15 110 (for example) this recalculated MD5 maybe compared to encrypted MD5 1 14 to 
verify that the file identified in descriptor file 130 is in fact the file that has just been 
retrieved. If the file is not verified then step 642 may be implemented again to find 
the correct file. 

Assuming the file has been verified, in step 654 encrypted file 1 10 is decrypted 
20 using plaintext MD5 106 to obtain the original plaintext file 102. In this embodiment 
of the invention, plaintext MD5 106 is also present within descriptor file 130 along 
with encrypted MD5 114. In other alternative embodiments, it is conceivable that 
plaintext MD5 1 06 need not be present within file 1 30 but is delivered to the user in 
another suitable fashion. The user may now assume that file 102 is the original file 
25 that has been sealed earlier. In an alternative embodiment, the user may also verify 
the authenficity of file 102 by recalculating its MD5 and comparing this recalculated 
MD5 with plaintext MD5 106. Such a check verifies that an unscrupulous party has 
not substituted a bogus file for original file 102 and then encrypted the bogus file 
using the MD5 of the original file. If the file is not verified, then a suitable error 
30 handler 662 is invoked. 
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If verified, in step 666 a file request list is updated to indicate that file 102 has 
been accurately been obtained. If not all files identified in descriptor file 130 have 
been received, then control returns to step 646 to receive another file. If all files have 

_been received, m step 674 an indication is provided to the user that all files identified 

5 in descriptor file 130 have been successfully retrieved. In this fashion, a user 

provided with master MD5 146 and key MD5 138 is provided the means to obtain the 
originally encrypted and identified files, and is guaranteed that the original files have 
not been altered-since they were encrypted. - - - . ^ . _ 

FIG. 10 is a flow diagram describing retrieval of files uniquely identified using 
10 the embodiment of FIG. 7. Through the use of user MD5 464 and key MD5 406 a 
user may later locate and retrieve the plaintext versions of the files identified in 
descriptor file 402. Through the use of this embodiment a user is allowed to retrieve 
not only the encrypted descriptor file, but also the encrypted data files to retain in his 
possession. This may be advantageous in certain situations such as software escrow 
15 and pool management where a user wishes to keep in his possession the actual 
encrypted data files. The files cannot be decrypted, however, until key 406 is also 
supplied to the user. 

Steps 702-710 may be i3erformed in a similar fashion as in steps 602-610. In 
step 710, however, the file received is potentially the plaintext flattened descriptor file 
20 460. In step 714 the user may fiirther verify that the received flattened descriptor file 
is authentic by recalculating a digest for the file and comparing it to the digest 
included within administrative data 346 of file 460 (if present). 

Now that the user has obtained the plaintext flattened descriptor file, in steps 
718 and 722 the user may look for and retrieve those encrypted data files that are 
25 idenfified by their corresponding MD5s (for example 416, 422 and 432) included in 
file 460. These files may be identified and retrieved in any suitable manner and are 
preferably retrieved using the techniques described in steps 642, 646 and in FIG. 1 1 . 

In step 726 a received encrypted file is verified as being authentic by comparing 
its newly calculated MD5 with the MD5 fi-om file 460 that has been used to retrieve 
30 it. If not authentic, control returns to step 722 to wait for another file. Once verified, 
in step 730 a file request list is updated to indicate that one of the encrypted data files 

-26- 



wo 01/18633 



PCT/lBOO/01354 



has been successfully received. If, in step 734 not all files have been received, then 
control returns to step 722 to wait for another file. 

In step 738 master MD5 456 is extracted from file 460. By using master MD5 
456 presenTwitfiin flatTened"de'scriptor"file 460, the user-may-now locate and retrieve — 
encrypted descriptor file 452. Once the user is supplied v^^ith key MD5 406 from the 
originating party (once certain conditions are met, for example), the user will be able 
to eventually retrieve the original data files. For example, steps 738-764 may be 
performed as described in steps 606-638 above. Note that in step 750 the'key MD5 is 
not supplied unless the originator wishes the user to have access to the original files. 

1 0 Because the user has already retrieved the encrypted data files, once the 

directory structure has been built the user may decrypt the encrypted files in step 768 
using the plaintext MD5s that are found in descriptor file 402. In an alternative 
embodiment, the plaintext MD5s need not be included the file 402, but may be 
supplied to the user in some other fashion. In step 772 the plaintext files may be 

15 verified as described in step 658. Finally, in step 776 the directory structure may be 
populated with the plaintext files to restore them to their proper place. Additionally, 
any file meta data included in descriptor file 402 may also be applied to each file. 

Thus, through this embodiment a user to able to retrieve the encrypted 
descriptor file and all encrypted data files using user MD5 464. The user is unable to 
20 decrypt the data files until key MD5 406 is supplied. 

FIG. 11 is a flow diagram describing how a file may be looked for and obtained 
in accordance with an embodiment of the present invention. The procedure of FIG. 
1 1 may be used to implement steps 606, 642, 706,718 and 738 of FIGS. 9 and 10 in a 
preferred embodiment of the invention. 

25 In a preferred embodiment, a file (for example) is received in portions or 

segments. In other embodiments, files may be received whole or in a manner 
specified by any file transfer protocol. A file request list includes all of the files that 
are being requested until those files are received in their entirety. It is also possible 
that a file segment request list would be implemented that would include individual 

30 segments being requested. For example, individual segments of files may be 

requested when data or a code patch for a software application is required, or when 
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Specific entries for a database are obtained by a store or query result. An importer 
program manages the transfer of files to the recipient and determines when the files 
are. 

InoneeiSboainKmvthe'f^^^ 

5 computer system (or on a network) in which it looks for the files listed in a descriptor 
file. Thus, the importer may be implemented using a chained system which looks for 
files in different places. Thus, files are searched for first in the most convenient 
location and then in progressively less convenient locations. This "assembly line" is " 
configurable in kind and quantity of importers and may automatically and 
10 dynamically change to optimize economy, security or performance. Because the 

MD5s serve as content-based file names that enable the content of files to be verified 
once the files are recovered, it is possible to allow files to be recovered from arbitrary 
locations where they may be found without regard to checking the contents of the file 
using some sort of check sum. 

15 In step 802 the intrinsic unique identifier (lUI) of the file desired to be obtained 

is identified. This lUI may be any suitable identifier such as an MD5 that uniquely 
identifies a data file, a descriptor file, any encrypted file, or other digital information. 
In the following steps, the lUI may be matched with a particular file using any of a 
variety of techniques. In a preferred embodiment, files are stored along with their file 

20 name which is the lUI of the file. In other words, the encoded 27-bit alphanumeric 
MD5 of the file is also used as its file name. In this embodiment, the file system of a 
computer is used to help match the lUI with a particular file. In other embodiments, a 
database may use an lUI as a look up (or data base key) into the database to find the 
location of the file that is identified by the lUI. The database may contain a pointer to 

25 the file or the actual contents of the file if the file is a file object in an object-oriented 
database. Other techniques may be used to associate an lUI with a file in a storage 
device to facilitate matching a received lUl with a particular file on the storage 
device. For example, an lUI may also be associated with a file as a file attribute. It is 
also possible to recalculate an lUI for a found file and then compare it to an identified 

30 lUl to determine if the file is the correct file to retrieve. Other techniques include 
object database storage. 
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In step 804 an importer program looks for the desired file using its lUI in a 
local cache on the computer. In a preferred embodiment of the invention, this cache 
is a pool of files into which files have been stored previously, for example in steps 
242 and 548. Advantageously, this pool of files stores the fUl of a file as its file 

5 name for efficient retrieval. The cache may be implemented on a local-disk, within 
RAM, or on another local device. Preferably, the pool cache is organized as a 
hierarchy of folders wherein the included files use their lUIs as their file names. The 

- -pool cache-preferably uses.keyZyalue lookupjwhere an IUI is ttie key and the value is 
the bit sequence to be retrieved. If the file is found it is retrieved and the procedure 
10 ends. 

If the file is not found locally in a pool cache, in step 806 the importer looks for 
the file in local conventional storage. For example, of the file is not included in pool 
cache where the lUI is the file name, it is possible that the file is still stored locally 
and its lUl is associated with the file in some other manner. For example, the lUI 

15 may be a file attribute of a file and all files on local conventional storage (such as 
memory, disk, tape) may be scanned to search for a file attribute that matches the 
identified lUI. As a last result, brute force method, local storage may be scanned to 
determine the contents of all files present and an lUI may be recalculated for all of 
these files. The identified lUI fi-om step 802 may then be compared against each of 

20 these newly calculated lUIs to determine the correct file to be retrieved. If the file is 
found it is retrieved and the procedure ends. 

If the file is not found in conventional storage, in step 808 a file location request 
is broadcast to peer computers on a local area network. A file request list that 
includes the lUl of the file and its sequence numbers may also be created. Preferably, 

25 the identified lUI is broadcast to all computers on the network that implement a pool 
cache. These computers may then determine if the desired file is present within their 
pool by examining the broadcast lUI. Additionally, it is possible for a peer computers 
to examine its local conventional storage using the techniques described above. If the 
file is found, the computer having the file returns a location indicator to the 

30 requesting computer indicating the network location of the desired file. 

In step 810 the original computer establishes a one-to-one link with the 
computer that contains the desired file and requests a download of the file using a file 
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request. In this embodiment, the file is downloaded segment by segment, although it 
is possible that the file may be downloaded all at once. In step 812 the originating 
computer receives a file data packet containing segment data for the desired file. The 

sequence number of the received file data packet is checked against the file request 

5 list to determine if the packet received is for a file that is desired. Suitable examples 
of a file request and file data packet are shown in the above referenced application 
Nos. 09/236,366 and 09/235,146. 

If the data packet is needed for the current desired file, then in step 814 the 
segment data from the file data packet is stored as part of the desired file and the file 
10 request list is updated to indicate that this particular segment has been received. Step 
818 checks whether the file is complete and all segments have been received. If so, 
the file has been fully retrieved and the procedure ends. If not, then the originating 
computer waits to receive another downloaded file data packet in step 812. 

If, in step 808 the desired file was not found, then in step 81 8 the importer 
15 sends a request for the file to any pre-configured or well-known servers that 

implement a pool cache. For example, an importer may be pre-configured to connect 
to certain servers using an CP address if that server is known to implement a pool 
cache. By passing the lUI of the desired file to the particular server, the server may 
determine if the file is present within the pool cache by examining the file names of 
20 its files. Other addressing techniques may be used to form a connection with one of 
these servers. If the file is found it is retrieved and the procedure ends. 

In step 808 these peer computers may be dedicated pool cache servers that are 
dedicated to collecting and storing files that are identified by their lUI. In this 
fashion, broadcasting to these pool servers is efficient in that there is a high likelihood 
25 that one of the servers has the desired file in its cache. The broadcast may also reach 
certain software agents located on the computers whose primary function is to 
generate the unique identifiers such as is described in FIGS. 4 and 8. These software 
agents may also store the files and their associated lUIs in a pool cache of their own 
or in local conventional storage. 

30 If the file is not found in step 8 1 8 then in step 820 the importer looks for the 

desired file on any mounted volumes of file servers attached to the local area 
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network. In this situation, the file servers identified may not necessarily implement a 
. pool cache in a standard format, but nonetheless may store the desired file on a 
mounted volume such as in RAM, on disk, etc. The identified lUI may be used to 
_ find the d esire d file using any of the techniques discussed in step 802. If the file is 
5 found it is retrieved and the procedure ends. If the file is not found, then in step 822 
the importer looks for the desired file on any suitable FTP server using a URL, for 
example. In this situation the FTP servers may be accessed over the Internet using a 

URL and are passed the lUI of the desired .file._ As. the servers mayjiotjmplement a _ 

pool cache in a standard format, any of the techniques described in step 802 maybe 
10 used to find the desired file on the FTP server. If the file is found it is retrieved and 
the procedure ends. 

If the file is not found, other techniques may be used such as making a request 
over a GSM telephone and retrieval via satellite, using a web search engine to find the 
file associated with an lUI etc. An error handler may be invoked in step 824 to return 
15 a suitable error message if necessary. Thus, the procedure of FIG. 1 1 describes a 
technique by wish a desired file is searched for in an efficient manner using its lUL 
Local and likely places for the file are searched first while the remote and less likely 
places are searched later. 

EXAMPLES OF USE 

20 The various embodiments described herein are suitable for use in a wide range 

of technical and business applications. For example, the invention is useful in the 
secure storage of documents, in access control, in escrow of documents, for 
encryption issues, and in reliably proving creation of documents. The following 
examples may be implemented using any of the embodiments described herein, for 

25 example the embodiment of FIG. 2, the embodiment of FIG. 3 or the embodiment of 
FIG. 7. 

For any application, meta data 470 of flattened descriptor file 460 may be used 
to help an interested party search for and find content of interest. For example, 
consider a book whose chapters are encrypted and distributed on the Internet using an 
30 embodiment of the present invention. Meta data 470 may include keywords that help 
to describe the book, and locations where user MD5 may be found and payment made 
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to receive key MD5, Thus, as the flattened descriptor file is not encrypted, an 
interested party can perform a search on the Internet for a book using author, subject 
or title keywords; if these keywords are present in meta data 470, then the party may 
retrieve the flattened descriptor file and eventually retrieve the book using 
5 embodiments described herein. 

In the area of the secure storage, it is often desirable to be able to store 
documents in a public location that may be easily accessed by certain entities but not 
allow the documents to be opened or read except by authorized parties. FIG, 12 is a 
block diagram illustrating a use of the invention in the secure storage area. In this 

10 example, a bank desires to digitize a customers signature card and have it available 
for its distributed terminals to access and verify. One difficulty is that the card must 
be kept secure and not released to outside parties. The digital signature card file 902 
is processed using an embodiment of the present invention 904 to produce a key MD5 
906 and a master MD5 908. As part of the process an encrypted version of the card 

15 file 910 is also produced. When implemented using the embodiment of FIG. 2, key 
906 corresponds to MD5 1 06 and master 908 corresponds to MD5 1 14. In the 
embodiment of FIG. 3, the card file may be combined with other file and/or bank or 
card meta data to produce a descriptor file which then yields key 906 and master 908. 
Key 906 and master 908 are then stored securely within a banking application 912 

20 resident upon a bank terminal 914. Terminal 91 4 may be in communication with a 
bank mainframe that had originally calculated the MD5s and downloaded them to the 
terminal. In this example, security for this master and the key are the responsibility 
of the banking application. 

The encrypted card file 910 may then be transferred over the Internet or some 
25 other data link to non-secure public storage 91 6. Because file 910 is encrypted, an 
outside party cannot read it even though it is stored in public storage. When 
application 1 12 has a need for a particular card file, it may then use key 906 and 
master 908 to retrieve the encrypted file fi-om public storage 916 and decrypt it. Such 
a scenario is possible with multiple customer files and/or other types of documents. 
30 Other secure storage applications may be found in areas such as insurance and health. 

FIG- 13 is a block diagram illustrating use of an embodiment of the invention in 
the area of access control. Often an entity produces documents or information that it 
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wishes to provide to an authorized user, but only upon authentication of that user. 
Further, an entity may not wish to perform the authentication itself, but may wish 
another to perform the authentication. In this example, originator 921 has produced a 
file 922 that it wishes user 923 to have access to, but only if user 923 can authenticate 
5 itself, or if a certain time has passed, or if other conditions are met. Using a suitable 
embodiment of the invention 924, file 922 is processed to produce an encrypted 
version 925, a key MD5 926 and a user MD5 927. If utilizing the embodiments 
- - - shown in FIG. 2 or FIG. 3, user MDS 927 .would correspond to encrypted MD5 1 14_ _ 
or master MD5 146, respectively! Originator 921 is then free to transfer the 
1 0 encrypted file to public storage 928, to keep it itself, or even to deliver it to user 923. 
Because the file is encrypted, the user may not access it. 

Next, user MD5 is delivered to the user via email 929, another data link, a 
telephone, or any other physical exchange medium. By possession of user MD5, user 
923 may locate and retrieve the encrypted file but will not be able to decrypt it. 

1 5 Concurrently or thereafter, the two MD5s are transmitted to an authentication 

database 931 in a secure manner. For example, an Internet connection 930 using SSL 
may be used. A secure connection is preferred, as possession of both MD5s would 
allow any party to read the encrypted file. Database 931 may be present upon any 
suitable authentication server that acts an authenticating agent for originator 921 . For 

20 example, the server may be an LDAP server and protocol 930 and 935 may be secure 
LDAP protocols. Both MD5s are stored in a record 932 of the database along with 
authentication information 933. Information 933 is any suitable information suitable 
for authenticating user 923, such as a password. The authentication server also 
contains any of a wide variety of authenticating mechanisms for authenticating 

25 outside parties. Such authentication mechanisms are well knovm in the art. 

In order to access the encrypted file, user 923 delivers via a data link 934 both 
the user MD5 and the user's authentication information. The user MD5 serves as a 
record locator within the database to locate the correct key and authentication 
information. The authentication server next authenticates the user by comparing the 
30 authentication information or by performing some other well-known process. If 
authentic, the key MD5 is then delivered via a data link 935 back to user 923. 
Preferably, link 935 is a secure link such a an SSL protocol that protects the key. 
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Once user 923 is in possession of key MD5, it may now decrypt the encrypted file 
directly, or by way of decrypting an encrypted descriptor file. 

In this example, originator 921 may decide to revoke the user's privilege to 

view thefileat-anytimebysimply-communicaling-with-the authentication-server-; 

5 The server would then be directed to always to decline authentication for the user. 
Alternatively, record 932 may be associated with any number of users that might be 
authenticated to download key MD5. 

In another area of access control, files embodying music may be delivered to a 
user over the Internet who is not allowed to access the files until he or she has paid. 

10 Using the embodiment of FIG. 3, for example, the encrypted files may be delivered 
with a master MD5, or with the encrypted descriptor file 142 itself Once the user 
completes a credit card payment over the Internet, the issuing entity delivers key 
MD5 138 to the user which allows the user to decrypt the descriptor file. Once 
decrypted, the user has access to the plaintext MD5s which allows the user to decrypt 

15 the music files. Alternatively, the encrypted music files are not delivered to the user, 
but are located and retrieved by the user using the encrypted MD5 1 14 included in the 
descriptor file. Other examples in the area of access control in which this 
embodiment may be useftil are publishing on the Internet. 

FIG. 14 is a block diagram illustrating use of an embodiment of the invention 
20 for escrow purposes. A wide variety of infomiation may be put into escrow such as 
experimental records, legal documents, government records, etc. In this example, 
software company 942 produces a software program in the form of a software file 944 
which is used by a software user 946. For any of a number of reasons, both parties 
have agreed that the software files will put in to escrow for later access by the user if 
25 needed. The company, however, does not wish anyone to have access to the files 
unless the proper conditions are met. Accordingly, an embodiment of the invention 
948 processes files 944 to produces encrypted files 950, a key MD5 952 and a user 
MD5 954. User MD5 is then provided to the software user. In the embodiment of 
FIG. 7, files 950 may be retrieved by the user using a flattened descriptor file, or the 
30 file may simply be delivered to the user fi-om the software company. In the 

embodiment of FIG. 3, user MD5 corresponds to master MD5 146 and the encrypted 
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files may be stored in a public location held by escrow agent 956, or may be even by 
delivered from the company to the user. 

Key MD5 952 is delivered to escrow agent 956 who retains it until a condition 

— previously agreed upon by the company and the user is met. Upon satisfaction of the - 

5 condition, key 952 is delivered 958 to the user using any suitable means. Once in 
possession of the key, the user may decrypt an encrypted descriptor file to obtain the 
plaintext MD5s which will allow the user to decrypt and read the files 950. Thus, 
software escrow is made simpler. 

In another example of escrow, a pharmaceutical company is in the process of 
10 getting a drug approved and is generating voluminous evidence and clinical data that 
it may need to provide to the FDA. The, company may wish to speed up the approval 
process and insure that its massive amounts of data cannot be altered over time. The 
FDA, in a similar fashion, desires an assurance that such clinical data if held in 
escrow does not change over time. Using an embodiment of the present invention, a 
15 single MD5 (or other type of identifier) can represent an enormous amount of data 
and insure to the FDA that the documents originally used to create the MD5 have not 
changed since that time. 

In this example, the company regularly generates a user MD5 and a key MD5 
based upon any number of data files that the government may need to access. The 

20 user MD5 is then delivered to the FDA, at the same time the data files may be held by 
an escrow agent, put into public storage, or even delivered to the government. 
Because the company may wish to limit access to the data files should the approval 
process be abandoned, the files have previously been encrypted using an embodiment 
of the invention. Advantageously, should the company forgo the approval process, it 

25 may choose not to deliver the key MD5 to the FDA and as such the FDA (or anyone 
else) would be unable to decrypt the descriptor file. 

At the end of the approval process, the company delivers the key MD5 to the 
FDA who may then use it in conjunction with the user MD5 to decrypt the data files 
and view them. The company is protected against anyone viewing their files 
30 prematurely. The FDA is protected against the data being changed in the meantime. 
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because the user MD5 and the key MD5 guarantee that the files eventually decrypted 
are the ones that were originally used to create the user MD5 and they key MD5. 

The present invention may also be used in situations where the government or 

other entity-is concerned about-an entity-using enciyption-that-is-unbreakable. -For 

5 national security reasons, the government may wish at some point to decrypt private 
party communications. In this example, the private party agrees to encrypt their 
communications using an embodiment of the present invention in which a key MD5 
and a master Mf)5~(or a user MD5) are generatedr The files thaf have been ehcTypted " 
by the private party are delivered to public storage or to a government server for 

10 safekeeping. Based upon accepted legal principles and an agreement between the 
private party and the government, the key MD5 and the master MD5 are delivered to 
a suitable government agency for safekeeping. If at some future time it is legally 
determined that the communications of the private party must be decrypted, the 
govenunent agency may release both the key MD5 and the master MD5 to an 

15 appropriate legal entity who would then be able to not only locate and access the files 
but to decrypt them. Further, due to the nature of the present invention, both parties 
are virtually assured that the files eventually decrypted are the original files making 
up the secret communications of the private party. 

Embodiments of the present invention may also be used to prove the existence 
20 of records on a particular date. For example, consider an individual inventor who is 
working diligently to perfect an invention. His records include digital text files, 
digital drawings, and/or handwritten documents which may be digitized. On a 
particular date, the inventor uses an embodiment of the invention to create a key MD5 
and a master MD5 (or a user MD5) for all of his records in the form of computer 
25 files. The single MD5 is then delivered to the Patent Office. The Patent Office logs 
the MD5 as being received on a certain date and keeps it for safekeeping. Both the 
master MD5 and the key MD5 remain with the individual inventor. The actual digital 
files (encrypted) may be kept by the inventor, placed in public storage, or even 
delivered to the government. 

30 Should the inventor wish to abandon his invention and not disclose it, he simply 

need not provide the key MD5 to the Patent Office and the files would not be able to 
be decrypted. If the inventor desires to prove a date of conception some time later, 
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the key MD5 is delivered to the Patent Office which then has the capability to locate 
and decrypt the inventor's original documents. By virtue of the original master MD5 
being logged on particular date, it may be reliably be proven that the original 
documents that are eventually decrypted using the master MD5 and the key MD5 
5 where in fact in existence on that earlier date. 

In another example on how the present invention may be used to prove the 
existence of records on a particular date, consider a Notary Public with access to the 
Internet. A party who desires proof of the existence of a document on a particular 
date uses an embodiment of the invention to generate a unique MD5 for that 

10 document. For example, the embodiments of FIG. 2, FIG. 3 or FIG. 7 may be used, 
in which case the user generates MD5 114, master MD5 146 or user MD5 464. The 
user sends the MD5 (preferably encoded) to the Notary via electronic mail or some 
other suitable method on a particular date. The Notary receives the MD5, logs it, and 
notarizes it as being received on a particular date. At a later point in time, the 

1 5 corresponding key MD5 may be provided by the user to reliably prove that the 

document identified by the original MD5 was in existence on the date that the Notary 
received the original MD5. 

A generated intrinsic unique identifier (lUI), such as an alphanumeric encoded 
MD5, may be embedded in, transported, or attached to a wide variety of physical 

20 objects. For example, either MD5 may be received embedded in an electronic mail 
message to specify a set of files. Alternatively, the MD5s may be generated 
automatically by a network device performing the backup of the files and directories 
specified. The MD5s may be produced by a business application, thus sealing the 
relevant digital information relating to a particular transaction. In addition, MD5s 

25 may be generated for other reasons by any user, network node, application or 
hardware device that needs to uniquely specify a file or group of files for some 
purpose. Such MDSs may be embedded in and readily accessed from database 
applications, legacy applications running on mainfi'ames, text retrieval applications, 
web sites, etc. 

30 Further, an lUI (such as an alphanumeric encoded MD5) might be placed into 

digital content to identify that content, authorize its use, address further information, 
etc. For example, a music file such as the MP3 format might mix in, "splice," or use 
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a watermark to embed an lUl into the actual music file. Such an lUI might also be 
embedded into genetic material to reference further information about that genetic 
material. 

-AirTUrmight be attached physically-to-a physical object to provide a reference- 

5 for extensive information about that object. For example, a bar code representing an 
lUI might be present on a home appliance and represent a user's manual. Or, the 
alphanumeric representation of an lUI may be present on an object; a user might then 
type the lUl into a computer to receive files over the Internet about that object 

An lUI might be present within memory of a computing device to reference 
1 0 much more extensive programming or data for that device. For example, consider a 
typical smart card with a memory capacity of 2K bytes. This limited memory space 
is used for small programs and data. When inserted into a smart card terminal, such 
as an ATM, connections are made with other computing devices to execute the 
limited program and data stored on the smart card. To expand the usable program 
15 size, or the number of programs executable on a smart card, an lUI is embedded in 
memory of the smart card. The lUI uniquely identifies additional programs or data 
that can be loaded onto the smart card, or executed by the terminal or smart card. The 
same would work with other portable devices such as mobile telephones, personal 
digital assistants, etc. 

20 COMPUTER SYSTEM EMBODIMENT 

FIG. 1 5 is a block diagram illustrating a computer network environment 
suitable for use with an embodiment of the invention. User computer 962 connected 
to LAN 964 along with other computers access Internet 968 via a server computer 
966. Connected thereto is another server computer 974 attached to LAN 970 that 
25 includes user computer 972. As embodied in a software program, agent software 
residing upon either computer 962 or 972 is arranged to implement the flows for 
FIGS. 4 and 8 and produce encrypted files, descriptor files and the intrinsic unique 
identifiers. The files and identifier may then be held locally or distributed throughout 
the network in any suitable fashion. 

30 When implementing the flows of FIGS. 9 or 1 0, computer 972 includes agent 

software that identifies an intrinsic unique identifier and begins to look for it. If not 
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found locally, the request for a file or files is handled by server computer 974 that 
implements server software. Such server software may implement the flows of FIG. 
9 and 10 and portions of FIG. 1 1 to look for, retrieve, decrypt and deliver the 
requested files to computer 972. In an alternative embodiment, the functions 
5 implemented by the agent software and the server software need not be separated, but 
may be embodied within a single software program that is present on one computer or 
any number of computers. 

FIGS. 16 and 17 illustrate a computer system 1000 suitable for implementing 
any of the computers mentioned herein. FIG. 16 shows one possible physical form of 

1 0 the computer system. Of course, the computer system may have many physical forms 
ranging from an integrated circuit, a printed circuit board and a small handheld device 
up to a huge super computer. Computer system 1000 includes a monitor 1002, a 
display 1004, a housing 1006, a disk drive 1008, a keyboard 1010 and a mouse 1012. 
Disk 1014 is a computer-readable medium used to transfer data to and from computer 

15 system 1000. 

FIG. 17 is an example of a block diagram for computer system 1000. Attached 
to system bus 1020 are a wide variety of subsystems. Processor(s) 1022 (also 
referred to as central processing units, or CPUs) are coupled to storage devices 
including memory 1024. Memory 1024 includes random access memory (RAM) and 

20 read-only memory (ROM). As is well known in the art, ROM acts to transfer data 
and instructions uni-directionaljy to the CPU and RAM is used typically to transfer 
data and instructions in a bi-directional manner. Both of these types of memories 
may include any suitable of the computer-readable media described below. A fixed 
disk 1026 is also coupled bi-directionally to CPU 1022; it provides additional data 

25 storage capacity and may also include any of the computer-readable media described 
below. Fixed disk 1026 may be used to store programs, data and the like and is 
typically a secondary storage medium (such as a hard disk) that is slower than 
primary storage. It will be appreciated that the information retained within fixed disk 
1026, may, in appropriate cases, be incorporated in standard fashion as virtual 

30 memory in memory 1024. Removable disk 1014 may take the form of any of the 
computer-readable media described below, ' 
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CPU 1022 is also coupled to a variety of input/output devices such as display 
1004, keyboard 1010, mouse 1012 and speakers 1030. In general, an input/output 
device may be any of: video displays, track balls, mice, keyboards, microphones, 
touch-sensitive displays, transducer card readers, magnetic or paper tape readers, 
5 tablets, styluses, voice or handwriting recognizers, biometrics readers, or other 
computers. CPU 1 022 optionally may be coupled to another computer or 
telecommunications network using network interface 1040. With such a iietwork 
-interface, it is contemplated that the_CPU might receive information from the 
network, or might output information to the network in the course of performing the 
1 0 above-described method steps. Furthermore, method embodiments of the present 
invention may execute solely upon CPU 1022 or may execute over a network such as 
the Internet in conjunction with a remote CPU that shares a portion of the processing. 

In addition, embodiments of the present invention further relate to computer 
storage products with a computer-readable medium that have computer code thereon 

1 5 for performing various computer-implemented operations. The media and computer 
code may be those specially designed and constructed for the piuposes of the present 
invention, or they may be of the kind well known and available to those haying skill 
in the computer software arts. Examples of computer-readable media include, but are 
not limited to: magnetic media such as hard disks, floppy disks, and magnetic tape; 

20 optical media such as CD-ROMs and holographic devices; magneto-optical media 
such as floptical disks; and hardware devices that are specially configured to store 
and execute program code, such as application-specific integrated circuits (ASICs), 
programmable logic devices (PLDs) and ROM and RAM devices. Examples of 
computer code include machine code, such as produced by a compiler, and files 

25 containing higher level code that are executed by a computer using an interpreter. 

Although the foregoing invention has been described in some detail for 
purposes of clarity of understanding, it will be apparent that certain changes and 
modifications may be practiced within the scope of the appended claims. For 
example, in the embodiment of FIG. 7, the key identifier could be provided first to a 
30 user, and then the master identifier later, instead of the other way around. Therefore, 
the described embodiments should be taken as illustrative and not restrictive, and the 
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invention should not be limited to the details given herein but should be defined by 
the following claims and their full scope of equivalents. 
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CLAIMS 

1 . A method of producing an encrypted version of a binary asset, said method 
comprising: 

generating a unique identifier for said binary asset, said unique identifier 
being computed from at least a portion of the contents of said binary asset and 
uniquely identifying said binary asset; 

encrypting said binary asset using said unique identifier as a key, said 
encrypting resulting in said encrypted version of said binary asset; and 

providing said unique identifier to decrypt said encrypted version of said 
binary asset and to verify the integrity of said decrypted version of said binary asset. 

2. A method as recited in claim 1 further comprising: 

generating a second unique identifier for said encrypted version of said binary 
asset, said second unique identifier being computed from at least a portion of said 
encrypted version of said binary asset and uniquely identifying said encrypted version 
of said binary asset; and 

providing said second unique identifier for the retrieval of said encrypted 
version of said binary asset, whereby said second unique identifier may be used to 
locate said encrypted version. 

3. A method as recited in claim 2 fiirther comprising: 

creating a descriptor file that includes said unique identifier and said second 
unique identifier; 

generating a third file identifier, said third file identifier being computed fi-om at 
least a portion of said descriptor file and uniquely identifying said descriptor file; 

encrypting said descriptor file using said third file identifier as a key, said 
encrypting producing an encrypted descriptor file; and 
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generating a fourth file identifier for said encrypted descriptor file, said fourth 
file identifier being computed from at least a portion of said encrypted descriptor file 
and uniquely identifying said encrypted descriptor file, whereby said third file 
identifier and said fourth file identifier may be used to access the contents of said 
binary asset. . 

4. A method of uniquely and securely identifying a computer file, said method 
comprising; 

generating a first file identifier for a file, said first file identifier being 
computed firom at least a portion of said file and uniquely identifying said file; 

encrypting said file using said first file identifier as a key, said encrypting 
producing an encrypted file; 

generating a second file identifier for said encrypted file, said second file 
identifier being computed fi*om at least a portion of said encrypted file and uniquely 
identifying said encrypted file; and 

providing said first file identifier and said second file identifier for the 
retrieval of said file, whereby said second file identifier may be used to locate said 
encrypted file, and said first file identifier may be used to decrypt said encrypted file 
to produce said file. 

5. A method as in claim 4 wherein said steps of generating use a hash function. 

6. A method as recited in claim 4 further comprising: 
compressing said file in conjunction with said encrypting. 

7. A method as recited in claim 4 further comprising: 

creating a descriptor file that includes said first file identifier and said second 
file identifier; 

generating a third file identifier, said third file identifier being computed firom at 
least a portion of said descriptor file and uniquely identifying said descriptor file; 
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encrypting said descriptor file using said third file identifier as a key, said 
encrypting producing an encrypted descriptor file; and 

generating a fourth file identifier for said encrypted descriptor file, said fourth 

^file-identifier beingxoniputed from_at Jeast.a portijOT Qf said encryjited descri ptor file 

and uniquely identifying said encrypted descriptor file, whereby said third file 
identifier and said fourth file identifier may be used to access the contents of said file. 

8. A method of uniquely and securely^identifying a group of bin^ assets,_a 

binary asset representing digital information, said method comprising: 

computing an intrinsic unique identifier (lUI) for each of said binary assets; 

encrypting each of said binary assets using the lUI of each asset as its key to 
produce an encrypted version of each of said binary assets; 

computing an lUI of each of said encrypted versions; 

creating a file that includes said lUIs of said binary assets and said lUIs of said 
encrypted versions; 

computing a key lUI for said file; 

encrypting said file using said key lUl to produce an encrypted file; and 

computing a master lUI for said encrypted file, whereby said key lUI and said 
master lUI uniquely represent said binary assets and may be used to locate said 
assets. 

9. A method as recited in claim 8 wherein said intrinsic unique identifiers are 
computed from a portion of the asset or file for which they are computed, and 
uniquely identify the asset or file for which they are computed. 

10. A method as recited in claim 9 wherein each lUl is calculated using a hash 
fimction. 

11. A method as recited in claim 8 fiirther comprising; 

compressing each of said binary assets. 
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12. A method as recited in claim 8 further comprising: 

creating a flattened file that includes said lUIs of said encrypted versions of said 
binary assets and said master lUI; and 

computing a user TUT of said flattened file, whereby a user provided with said 
user lUI may retrieve said flattened file and thereby retrieve said encrypted versions 
of said binary assets and retrieve said encrypted file. 

13. A descriptor file data structure that reliably identifies a plurahty of files, said 
data structure comprising: 

a file name for each of said files; 

meta data for each file indicating attributes of each file; 

a first intrinsic unique identifier (lUI) for each of said files, each lUI being 
calculated fi^om the contents of its corresponding file and uniquely identifying its 
corresponding file; and 

a second lUI associated with each of said files, each second lUI being 
calculated fi*om an encrypted version of its associated file, each file being encrypted ' 
using its associated first lUI as a key, 

wherein said second lUIs may be used to locate said encrypted versions of said 
files, and said first lUIs may be used to decrypt said encrypted versions to obtain the 
non-encrypted versions of said files. 

14. A descriptor file as recited in claim 13 wherein said descriptor file is 
encrypted using its own lUI as a key, said lUI of said descriptor file being calculated 
from the contents of said descriptor file and uniquely identifying said descriptor file. 

15. A method of uniquely and securely identifying a group of files, said method 
comprising: 

creating a key file that includes a plurality of cryptographic keys, each key 
being associated with one of said group of files; 
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computing a unique identifier for said key file, said key file identifier being 
calculated from a portion of the contents of said key file; 

encrypting said key file using said key file identifier to produce an encrypted 

— -key file^- _ _ 

computing a unique identifier for said encrypted key file, said encrypted key 
file identifier be calculated from a portion of the contents of said encrypted key file; 

creating a flattened file that includes said encrypted key file identifier and 
unique identifiers for encrypted versions of said files, each unique identifier of one of 
said encrypted files being calculated from the contents of its associated encrypted file, 
each encrypted file having been encrypted using its associated key to encrypted the 
plaintext version of the file; and 

computing a user unique identifier for said flattened file, said user unique 
identifier be calculated from a portion of the contents of said flattened file, whereby a 
user provided with said user unique identifier may retrieve said flattened file and said 
encrypted versions of said files, and when provided with said key file identifier said 
user may decrypt said encrypted files. 

16. A method as recited in claim 15 wherein each of said keys is a unique 
identifier for its associated file and is calculated from a portion of the contents of its 
associated file. 

17. A method as recited in claim 1 5 wherein said key file includes meta data for 
each of said files along with its associated key. 

18. A method of reliably retrieving a secure file, said method comprising: 

receiving an intrinsic unique identifier for an encrypted version of said file; 

retrieving said encrypted version of said file using said lUI of said encrypted 
versions; 

receiving an lUI for the non-encrypted version of said file; and 
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decrypting said encrypted version of said file using said lUl of said non- 
encrypted version as a key to obtiain the non-encrypted version of said file, whereby 
said lUI of said encrypted version and said lUl of said non-encrypted version provide 
access to the contents of said file. 

1 9. A method as receited in claim 1 8 further comprising: 

decompressing said encrypting version of said file in conjunction with said 
- -decrypting. - _ _ _ _ 

20. A method as recited in claim 1 8 wherein said intrinsic unique identifiers for 
said encrypted version and said non-encrypted version are respectively calculated 
from the contents of said encrypted version and said non-encrypted version. 

21 . A method of obtaining a data file that has been securely stored, said method 
comprising: 

receiving a master identifier that uniquely identifies an encrypted file; 

retrieving said encrypted file using said master identifier; 

receiving a key identifier that uniquely identifies the non-encrypted version of 
said encrypted file; 

decrypting said encrypted file using said key identifier to obtain said non- 
encrypted version, said non-encrypted version including a data file identifier that 
uniquely identifies a data file and an encrypted version of said data file; 

retrieving said encrypted version of said data file using said encrypted 
identifier; and 

decrypting said encrypted data file using said data file identifier as a 
decryption key, whereby said non-encrypted version of said data file is obtained. 

22. A method as recited in claim 21 wherein said non-encrypted file includes meta 
data for said data file and said method further comprises: 

building a portion of a directory structure using said meta data. 
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23. A method as recited in claim 21 wherein said non-encrypted file includes a 
plurality of data file identifiers that each uniquely identifies a data file, and a plurality 
of encrypted identifiers that each uniquely identifies an encrypted version of one of 
said data files, said method further comprising: 

retrieving said encrypted versions of said data files using said encrypted 
identifiers; and 

decrypiing_sai_d encrypted data files using said data file identifiers as _ 

decryption keys. 

24. A method as recited in claim 21 fiirther comprising: 

calculating a new key identifier for said non-encrypted file; and 

comparing said new key identifier to said key identifier to authenticate said 
encrypted file. 

A method as recited in claim 21 fiirther comprising: 

calculating a new data file identifier for said data file; and 

comparing said new data file identifier to said data file identifier to authenticate 
said data file. 

26. A method of obtaining a data file that has been securely stored, said method 
comprising: 

receiving a user identifier that uniquely identifies a non-encrypted first file, 
said non-encrypted first file including a unique identifier identifying an encrypted 
version of said data file and a master identifier that uniquely identifies an encrypted 
version of a descriptor file; 

retrieving said non-encrypted first file using said user identifier; 

retrieving said encrypted descriptor file using said master identifier; 

retrieving said encrypted data file using said unique identifier for said 
encrypted version of said data file; 

-48- 



wo 01/18633 



PCT/lBOO/01354 



receiving a key identifier that uniquely identifies the non-encrypted version of 
said encrypted descriptor file; 

decrypting said encrypted descriptor file using said key identifier to obtain 

sa)d-non-encryptedjv.ersion_Qf said.descriptprJUe, s^ 

including a data file identifier that uniquely identifies said data file; and 

decrypting said encrypted data file using said data file identifier as a 
decryption key, whereby saidjionjcncrypted version of said data file is obtained. 

27. A method as recited in claim 26 wherein said non-encrypted descriptor file 
includes meta data for said data file and said method further comprises: 

building a portion of a directory structure for said data file using said meta 

data. 

28. A method as recited in claim 26 wherein said non-encrypted first file includes 
a plurality of encrypted identifiers that each uniquely identifies an encrypted version 
of one of a plurality of data files, and wherein said descriptor file includes a plurality 
of a data file identifiers that each uniquely identifies one of said data files, said 
method further comprising: 

retrieving said encrypted versions of said data files using said encrypted 
identifiers; and 

decrypting said encrypted data files using said data file identifiers as 
decryption keys. 

29. A method as recited in claim 26 fiirther comprising: 

calculating a new key identifier for said non-encrypted descriptor file; and 

comparing said new key identifier to said key identifier to authenticate said 
non-encrypted descriptor file. 

30. A method as recited in claim 26 further comprising: 
calculating a new data file identifier for said data file; and 
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comparing said new data file identifier to said data file identifier to 
authenticate said data file. 
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<?xml version= • 1 . 0 • ?> 

<!DOCTYPE ecml SYSTEM "http://www.waveresearch.be/dtd/ecml.dtd 
<ecml version="2 . 0" compatibleversion="2 .0"> 
<eclipdescription> 

<ineta naine="type" value="Dell" /> 

_ _ <ineta naine^ " name" v alue="Enc rypted_ N etwork Pack age "/> 

<ineta naine= "comment " value="ehis is a comment "/> 
<meta name=" author .name" value= "Abraham Felsenstein" /> 
<meta name=" author .email" value=" syncromedia@ping.be" /> 
<meta name= " encoding " value= " St andardCrypt " / > 
<meta name="con¥)atibletype'* value=" Standard" /> 
<meta name="numf iles" value="4"/> 
<meta name="numf older s" value="l"/> 

-<mera~name="totalsize"~value="9011"/>-- " 

<meta name=" creation. date" value="1999 . 07 . 22 11:25:44 
GMT+02:00"/> 

<meta name=" author .organization" value=""/> 
<keyword name="Contract_ID" value="0005" namespace="dell"/ 
<keyword name="Contract_Naine" value="Salfes 005" 
namespace = " del 1 " / > 

<keyword name="Contract_Destination" value="John Doe" 
namespace= " del 1 " / > 

</eclipdescription>< ! > 

<eclipcontents> 
<hfml> 

<folder name="net" winattributes.readonly=" false" 
winattributes . hidden= "false " winat tributes . sys tem= " false " 
winattributes . archive^ "false" winattributes . temp= " false "> 

<file name="FtpClient .class" size="3648" 
md5= " FVHLQCTITF J6 2X4ULSLQF9 4 ILRP " 

decoded . md5= " 3 SBUVEESBOAVLxB06lD0E518E7G " decoded . size= "7064" 
' whenmodified=:"1999.06.14 13:20:50 GMT+02:00" 
whencreated="1999.07.22 11:03:31 GMT+02:00" 
winattributes.readonly==" false" winattributes .hidden=" false" 
winattributes . system=" false" winattributes -archive=" true" 
winattributes . temp= " false " /> 

<file name="FtpInputStream. class" size="560" 
mdS^ " CSVINULL4RDSQx4 47NTI4T4BQGB " 

decoded . md5= " A5UU02 8DBF7V9xDGOD3 1VMOH24E " decoded . size= " 978 " 
whenmodified="1999.06.14 13:20:50 GMT+02:00"- 
whencreated="1999.07.22 11:03:31 GMT+02:00" 

winattributes . readonly^ " false" winattributes . hidden=" false" 
winattributes . sys tem= " false " winattributes . archive= " true" 
winattributes . temp= " false "/ > 

<file name="FtpLoginException. class" size="320" 
md5="2IIKCDL66E173x0MF09R0E7IHHl " 

decoded. md5= "ClKHALJ3VDILOxF8QJ3PDPLJTUL" decoded. si ze=" 4 91 " 
whenmodified=" 1999. 06.14 13:20:50 GMT+02:00" 
whencreated="1999.07.22 11:03:32 GMT+02:00" 
winattributes . readonly^ " false" winattributes .hidden^" false" 
winattributes . system= " false " winattributes . archive= " true " 
winattributes . temp= " false " /> 

<f ile name="FtpProtocolException. class" size="320" 
md5="ARC34P9F68KA9xA4ECG9O3L0K42 " 

decoded. md5="9UA8J446KV097x39EM0CJHDU5KI" decoded, sizep" 478" 
whenmodified=" 1999. 06.14 13:20:50 GMT+02:00" 
whencreated="1999.07.22 11:03:32 GMT+02:00" 
winattributes . readonly= " false " winattributes . hidden= " false " 
winattributes . sys tem= " false " winattributes . archive= " true " 
winattributes . temp= " false " /> 
</f olderx ! --net — > 

</hfml>< ! > 

</eclipcontents>< ! > 

</ecinl><! > FIG. 6A 
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<?xml vGrsion= ' 1 . 0 ' ?> 
< * DOCTYPE ecmi SYSTEM"" htTtp^ /7v^^ 
<ecml version="2 .0" compatibleversion="2 .0"> 
<eclipdescription> 

<meta name="type" valuer "Dell " /> 

<meta naine="naine" value= "Encrypted Network Package" /> 
" ' ' <meta~name=="coiTiment" value-" this- is- a- comment-^' /> - - - - 

<meta name=" author .name" value= "Abraham Felsenstein" /> 

<meta naine= "author . email " value="syncromedia@ping.be"/> 

<meta name=^ "encoding" value="StandardCrypt"/> 

<meta name=" compatible type" value= " Standard " /> 

<meta name="numf iles" value="4"/> 

<meta name="numf older s" value="l"/> 

<meta name=" totalsize" ■value="9011"/> 

<meta name=" creation. date" value="1999 . 07 . 22 11:25:44 
GiyiT+02:00"/> 

<ineta name=" author. organization" value=""/> 

<keyword name="Contract_ID" value="0005" namespace="dell"/> 

</eclipdescription>< ! > 

<eclipcontents> 

<keyfile md5=" 82F04VMlEQJSDxlUJ4G9V3TT57E" si2e="896" 
whenmodified="1999.07.22 11:25:44 GMT+02:00"/> 

<file md5="FVHLQCTlTFJ62x4ULSLQF94ILRP" size="3648" 
whenmodified="1999.06.14 13:20:50 GMT+02:00"/> 

<file md5="CSVINULL4RDSQx447NTI4T4BQGB" size="560" 
whenmodified="1999.06.14 13:20:50 GMT+02 : 00 " /> 

<file md5="2IIKCDL66E173x0MF09R0E7IHHl" size="320" 
whenmodified="1999.06.14 13:20:50 GMT+02:00"/> 

<file md5="ARC34P9F68KA9xA4ECG9O3L0K42" size="320" 
whenmodified="1999.06.14 13:20:50 GMT+02:00V> 
</eclipcontents>< I > 

<ecliporigin clipboxid="040-762-05-413-6338" clipboxcount="9" 
seatid= "c7cd7bl2-bcdf-lld2-b045-00400569895e"> 
</ecliporigin>< ! > 

<eclipsignature digest= "qliWJo2zuqBcRTgTrHD4Kg== 
"/> 

</ecml><! > 
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